AI Supply Chain - Model Loader Dropping Executables (T1105)

Ibrahim Saud@tektrix

•updated Jun 21, 2026•0•0•1

Maps the Python interpreter dropping PE files (.exe) into temporary directories, a behavior associated with stage 2 loaders embedded in AI models.